CVE-2018-11255: Null Pointer Dereference
An issue was discovered in PoDoFo 0.9.5. The function PdfPage::GetPageNumber() in PdfPage.cpp in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted PDF document.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2018-11255?
CVE-2018-11255 has a severity rating that indicates a denial of service vulnerability due to a NULL pointer dereference.
How do I fix CVE-2018-11255?
To fix CVE-2018-11255, upgrade PoDoFo to version 0.9.7 or later as those versions contain the security patch.
What software is affected by CVE-2018-11255?
CVE-2018-11255 specifically affects PoDoFo version 0.9.5 and the Debian package libpodofo.
What kind of attack can be executed using CVE-2018-11255?
An attacker can exploit CVE-2018-11255 to cause a denial of service by sending a specially crafted PDF document.
Is CVE-2018-11255 easy to exploit?
Yes, CVE-2018-11255 can be considered easy to exploit as it involves a straightforward crafted input to trigger the vulnerability.